Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f8g9-xx53-mgmc

Опубликовано: 09 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.4

Описание

SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application.

SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application.

EPSS

Процентиль: 19%
0.0006
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-285
CWE-863

Связанные уязвимости

CVSS3: 6.4
nvd
около 2 лет назад

SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application.

CVSS3: 6.4
fstec
около 2 лет назад

Уязвимость программного средства управления финансами SAP S/4HANA Finance, связанная с неправильной авторизацией, позволяющая нарушителю создавать внутренние банковские счета

EPSS

Процентиль: 19%
0.0006
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-285
CWE-863